Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-10009

Malware in sbrugna...

7.2CVSS6.6AI score0.00061EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2024/07/28 7:16 p.m.149 views

Exploit for Path Traversal in Jenkins

CVE-2024-23897 Because of a misconfiguration of a default o...

9.8CVSS7.2AI score0.94466EPSS
Exploits45
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.48 views

FreeBSD : jenkins -- multiple vulnerabilities (8b03d274-56ca-489e-821a-cf32f07643f0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8b03d274-56ca-489e-821a-cf32f07643f0 advisory. - Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI...

9.8CVSS8.9AI score0.94466EPSS
Exploits46References4
OSV
OSV
added 2024/01/24 6:15 p.m.40 views

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

9.8CVSS6.9AI score0.94466EPSS
Exploits45References7
Vulnrichment
Vulnrichment
added 2024/01/24 5:52 p.m.28 views

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

9.6AI score0.94466EPSS
Exploits45References5
Tenable Nessus
Tenable Nessus
added 2024/01/24 12:0 a.m.99 views

Jenkins LTS < 2.426.3 / Jenkins weekly < 2.442 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.426.3 or Jenkins weekly prior to 2.442. It is, therefore, affected by multiple vulnerabilities: - Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disabl...

9.8CVSS8.9AI score0.94466EPSS
Exploits46References3
NVD
NVD
added 2017/04/07 5:59 p.m.13 views

CVE-2016-9197

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...

7.2CVSS6.5AI score0.00061EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2017/04/07 12:0 a.m.15 views

Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers Shell Bypass Vulnerability

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. Copyright C 2017 Greenbone Networks GmbH Some te...

7.2CVSS6.5AI score0.00061EPSS
Exploits0References1
Cisco
Cisco
added 2017/04/05 4:0 p.m.19 views

Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers Shell Bypass Vulnerability

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. The vulnerability is due to incorrect permission...

6.7CVSS6.5AI score0.00061EPSS
Exploits0References1
CVE
CVE
added 2016/08/08 12:0 a.m.80 views

CVE-2015-6396

CVE-2015-6396 affects Cisco RV110W, RV130W, and RV215W routers. The issue stems from the CLI command parser, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary shell commands with administrator privileges. This vulnerability could enable fu...

7.8CVSS7.9AI score0.02368EPSS
Exploits3References4Affected Software1
Rows per page
Query Builder